topic Re: Chassis HA in Freeze in Hyperscale Firewall (Maestro)

Chassis HA in Freeze

Wolfgang — Wed, 31 May 2023 13:01:15 GMT

We did some failover tests in a Maestro DualSite VSX environment.

After a site failover we saw a state "Chassis HA in freeze" in asg monitor. This state runs a first countdown from 150s and then the site with the higher priority becames active again. A second 150s countdown starts and then asg monitor shows no more the Freeze.

Can someone explain the behaviour ? I understand there is an interval to wait until switch back but nothing found in the documentation.

Re: Chassis HA in Freeze

_Val_ — Wed, 31 May 2023 13:14:37 GMT

See in the guide: https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Chassis_AdminGuide/Topics-Chassis-AG/Dual-Chassis-Configuring-Chassis-High-Availability.htm

Configuring the Failover Freeze Interval

Description

A Standby Chassis cannot failover a second time until the specified failover freeze interval expires.

The default failover freeze interval is:

For the "Active Up" chassis configuration - 30 seconds
For the "Primary Up" chassis configuration - 150 seconds
For VSX

Virtual System Load Sharing (VSLS) configuration - 150 seconds

If the Standby Chassis grade changes to a value greater than the minimum quality grade gap for a failover, the Standby Chassis fails over and becomes a new Active.

The failover does not start until the freeze interval expires. This confirms that the Standby Chassis quality grade is stable, before it becomes a new Active.

For example, a Standby Chassis quality grade can become unstable if a fan speed increases and decreases frequently.

Syntax in Gaia gClish of the Security Group

set chassis high-availability freeze_interval <Freeze Interval>

Parameters

Parameter	Description
`<Freeze Interval>`	Minimum time in seconds to wait until the next Standby Chassis failover. Valid range: integer between 1 and 1000.

Parameter

Description

<Freeze Interval>

Minimum time in seconds to wait until the next Standby Chassis failover.

Valid range: integer between 1 and 1000.

Notes:

When you run the "asg stat" command after Standby Chassis failover, the output shows the freeze time.
The <Freeze Interval> value is 5 fold greater, if the setup is configured to work in VSLS or "Primary Up" mode.

Example: If the freeze time must be 250 seconds, you must enter the value 50.

Re: Chassis HA in Freeze

Wolfgang — Wed, 31 May 2023 13:20:09 GMT

@_Val_ I saw these, but this documentation is "Quantum Scalable Chassis R81.10 Administration Guide". Nothing found in the Maestro Guides.

Re: Chassis HA in Freeze

_Val_ — Wed, 31 May 2023 13:53:16 GMT

Let's ask the experts.

@Lari_Luoma, @Anatoly can you please advise?

Re: Chassis HA in Freeze

Lari_Luoma — Wed, 31 May 2023 16:47:59 GMT

This is to prevent flapping between sites. We want to make sure that after a site has come active, it will stay active for the freeze period before failing over again. I'm not sure why this is not in Maestro admin guide. As far as I know the feature works the same way in chassis and Maestro.

Re: Chassis HA in Freeze

Wolfgang — Wed, 31 May 2023 17:03:51 GMT

Thanks @Lari_Luoma that‘s what I thought, but I was wondering nothing to find in the Maestro documentation.